Better token expiration handling

[MikeBishop]

Now that we have the code to parse the JWTs, we don't have to assume the length of a token's duration -- we can read it. We can also respond to 401 errors by refreshing the token instead of continuing to fail until what we thought was the expriation time.